$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/1d1fd279-394b-33ab-a67e-8eaa8ec4aff1.roa File: 1d1fd279-394b-33ab-a67e-8eaa8ec4aff1.roa (raw, json) Hash identifier: 5rgBgSFfucAD/oJSHYvPu8BZ1OPZyr4Ala5kkjOAU4k= Subject key identifier: E3:A8:4A:2C:F5:D9:83:05:3A:C7:47:D2:95:44:4E:0A:09:C5:C2:3B Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F43285849CE9A63EB4D031ABFFDC4B900 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/1d1fd279-394b-33ab-a67e-8eaa8ec4aff1.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 13325 IP address blocks: 198.151.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:63:eb:4d:03:1a:bf:fd:c4:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=49aebe8e-df40-419f-b3ae-703955c3de62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:47:30:ca:9e:88:75:ab:b9:8e:cf:60:b1: 9a:02:58:1e:98:13:58:91:c9:9f:8a:c0:b1:83:e5: 49:6a:2e:fb:81:61:be:f1:c9:25:d1:61:c8:c0:9d: bb:8a:cf:51:c8:8a:dc:e1:be:29:41:3a:cc:ab:92: 6c:64:2e:82:22:d5:37:b1:53:82:69:9f:38:95:5c: ff:22:07:f9:b1:f8:7b:ff:d8:04:2a:1e:c9:02:5d: ba:bc:8d:70:07:93:6d:1b:20:bd:27:4b:46:8a:49: 25:77:9e:3f:0e:ea:36:71:c4:e2:3d:82:04:1e:3d: 90:01:ea:68:30:d3:bd:1a:d0:a9:0c:98:c8:83:ad: 12:b4:b9:f6:50:ff:8d:1e:00:c8:2b:a3:6f:94:92: 16:4c:97:8c:dc:92:bb:6c:92:55:85:71:63:a3:c6: 58:f4:bb:fb:e0:c1:61:50:45:4f:8b:e4:09:5d:22: fa:87:cf:1b:6b:52:5f:c5:6a:58:b1:ab:2a:eb:bd: 0b:37:6c:8e:65:89:0b:3b:50:22:c4:a6:74:3a:b0: 37:0f:0c:df:c3:38:b6:4a:20:d0:66:5f:59:26:49: dc:1e:3d:d8:df:dc:af:ed:7f:e0:4f:a3:d5:44:83: 27:79:99:15:8f:51:5c:2b:07:e9:5e:e0:89:50:7f: 24:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A8:4A:2C:F5:D9:83:05:3A:C7:47:D2:95:44:4E:0A:09:C5:C2:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/1d1fd279-394b-33ab-a67e-8eaa8ec4aff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 198.151.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:af:af:b3:9c:18:10:3a:51:b2:ba:50:d8:6f:f3:fa:6d:2a: a6:0d:45:e2:f0:3f:4f:b1:a6:c0:92:ae:19:07:60:9f:01:a6: cd:f6:87:33:8b:ef:12:18:8a:30:b2:b2:38:28:10:46:ed:06: d7:fd:31:82:2a:5a:db:58:bd:3b:1f:0e:a7:fe:f6:c0:1f:ff: 29:c3:c7:3d:f9:8b:87:7a:5d:a8:bc:43:84:a6:a1:6d:ba:4b: d0:24:b0:a1:24:8e:11:28:27:44:48:56:f1:26:a3:0b:7a:29: 89:ff:3a:11:0d:d9:c9:ac:dd:5c:7e:64:2c:e2:3a:dd:c8:ff: 54:9a:15:9f:a1:64:63:a2:7b:13:cf:3b:6c:32:63:99:59:be: 6e:83:a5:31:40:88:18:e3:f5:ba:be:52:0d:2d:b9:d9:0c:a6: d2:e5:ef:42:1f:53:b8:9f:4f:73:5a:f7:19:f7:cf:e9:68:41: 7b:1f:92:fd:cb:7c:b5:6c:60:62:bc:24:5d:b9:89:91:ef:58: 64:37:a9:99:ba:3d:7b:8a:e4:d8:9e:ff:ba:57:0f:1b:44:75: 3f:ef:f4:32:3e:e5:22:d0:72:09:ee:f4:62:fe:e5:92:69:f7: da:3d:e4:09:e7:bb:05:3a:92:60:f8:54:6d:b8:44:f8:39:e7: 78:a5:61:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmPrTQMav/3EuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NDlhZWJlOGUtZGY0MC00MTlmLWIzYWUtNzAzOTU1YzNkZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscVHMMqeiHWruY7PYLGaAlgemBNYkcmfisCx g+VJai77gWG+8ckl0WHIwJ27is9RyIrc4b4pQTrMq5JsZC6CItU3sVOCaZ84lVz/ Igf5sfh7/9gEKh7JAl26vI1wB5NtGyC9J0tGikkld54/Duo2ccTiPYIEHj2QAepo MNO9GtCpDJjIg60StLn2UP+NHgDIK6NvlJIWTJeM3JK7bJJVhXFjo8ZY9Lv74MFh UEVPi+QJXSL6h88ba1JfxWpYsasq670LN2yOZYkLO1AixKZ0OrA3Dwzfwzi2SiDQ Zl9ZJkncHj3Y39yv7X/gT6PVRIMneZkVj1FcKwfpXuCJUH8krwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOoSiz12YMFOsdH0pVETgoJxcI7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvMWQxZmQyNzktMzk0Yi0z M2FiLWE2N2UtOGVhYThlYzRhZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpeiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2vr7OcGBA6UbK6UNhv8/ptKqYNReLwP0+xpsCSrhkHYJ8Bps32hzOL 7xIYijCysjgoEEbtBtf9MYIqWttYvTsfDqf+9sAf/ynDxz35i4d6Xai8Q4SmoW26 S9AksKEkjhEoJ0RIVvEmowt6KYn/OhEN2cms3Vx+ZCziOt3I/1SaFZ+hZGOiexPP O2wyY5lZvm6DpTFAiBjj9bq+Ug0tudkMptLl70IfU7ifT3Na9xn3z+loQXsfkv3L fLVsYGK8JF25iZHvWGQ3qZm6PXuK5Nie/7pXDxtEdT/v9DI+5SLQcgnu9GL+5ZJp 99o95AnnuwU6kmD4VG24RPg553ilYS0= -----END CERTIFICATE-----Generated at Sun May 11 00:46:29 2025 by rpki-client